
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier: QsftRaqGJluZVDZN9aXDeaBB4TQQ3MfVyYABbmmuFzk=
Subject key identifier: BA:DE:E2:33:B3:99:47:FD:14:49:4C:02:FB:22:A4:20:F8:DA:32:08
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number: F3
Signing time: Fri 17 Apr 2026 05:59:34 +0000
Manifest this update: Fri 17 Apr 2026 05:59:33 +0000
Manifest next update: Fri 24 Apr 2026 05:59:33 +0000
Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: kSbm+nw7cDflJdesXy4AktzUJAD1343eIYlLqrxsLbg=)
2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: yevu27JexQC1pFGY5em0jam11butIck0VftNXiMexLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Validity
Not Before: Apr 17 05:59:33 2026 GMT
Not After : Apr 24 05:59:33 2026 GMT
Subject: CN=69e1cc46-c8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:9f:b1:c7:c4:76:fe:17:69:51:e3:45:a2:
32:e2:89:f9:1e:fd:21:80:3a:a4:a8:a7:2f:a2:b7:
b8:28:e2:7f:5b:a4:1c:31:21:3f:b1:de:77:aa:ee:
34:39:d6:48:e0:8b:80:33:3e:71:ec:77:30:62:a0:
e5:86:f7:e8:8b:63:4f:bb:1c:3b:b9:30:7a:31:a3:
df:2c:c0:ba:76:d9:ef:2c:5a:48:fe:b4:af:08:02:
7d:0d:f5:d8:d4:07:25:4c:a8:5a:60:a8:85:68:d8:
2e:f2:29:6f:9f:bf:bd:74:16:78:ba:4b:1b:1c:a6:
db:4f:81:2f:3b:6a:01:fc:96:37:94:20:9f:f5:09:
43:70:53:03:d1:35:19:1d:60:cf:49:b0:7d:36:79:
15:21:0f:da:ec:dd:3d:7e:e2:eb:8d:69:67:c3:93:
28:e0:22:2c:da:40:a6:64:3d:95:61:7e:52:a1:0f:
73:de:1c:e2:f8:6c:a5:8d:38:9d:a0:1c:fa:27:74:
25:df:bd:39:2a:c7:2b:e4:ac:24:92:01:81:87:16:
f0:86:68:02:6e:36:4e:a3:39:b4:41:fb:e0:df:60:
12:0e:70:46:93:71:d0:c5:96:cc:f6:01:77:00:c8:
57:90:73:f1:db:cb:a9:60:25:9d:b9:15:9d:06:0c:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:E2:33:B3:99:47:FD:14:49:4C:02:FB:22:A4:20:F8:DA:32:08
X509v3 Authority Key Identifier:
keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3a:32:2f:d5:55:4d:85:b4:86:db:98:b7:62:b8:d4:e6:f4:
1b:7b:71:07:ba:17:46:91:ad:d4:27:2c:3b:38:23:7f:90:12:
67:9b:f4:dd:a1:f1:f3:37:cb:cd:1f:1d:cb:eb:21:08:e9:40:
1f:0e:1c:10:c0:3a:54:39:01:34:b0:5d:3b:2b:61:16:ac:5e:
16:67:22:70:55:9a:05:56:47:17:c7:e1:40:36:8f:dd:23:41:
9b:ac:f4:20:e7:6c:a4:f5:11:3a:8e:e4:71:78:70:3c:20:fc:
ab:d4:b5:91:68:96:3b:21:14:d4:49:fb:f5:44:6d:2e:3b:b2:
26:c3:c5:0a:98:48:fa:50:2c:b0:bb:af:93:2f:01:e0:32:78:
d2:f1:2e:61:97:1c:80:3c:66:84:02:e3:b3:9d:47:2b:ca:2c:
80:88:62:21:34:1b:ea:09:ca:b8:c0:05:17:82:1c:ed:e7:a1:
82:96:8f:19:1b:95:15:3d:f8:85:cb:55:69:48:d2:d6:4d:e6:
be:42:d3:59:55:ba:11:02:c1:1a:0c:81:87:b5:1a:de:e6:88:
29:12:5e:ee:e1:aa:a7:65:58:94:c5:ec:ee:07:d3:18:57:ef:
b3:e9:d4:06:89:52:a0:3b:fb:76:9c:db:ee:48:08:f7:c3:b9:
cf:e5:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:38 2026 by rpki-client